Microsoft Dynamics Business Central Cross-site Scripting Vulnerability
CVE-2021-36946

5.4MEDIUM

Key Information:

Vendor: Microsoft
Status: Dynamics 365 Business Central Spring 2019 Update; Microsoft Dynamics 365 Business Central 2020 Release Wave 1 - Update 16.15; Microsoft Dynamics 365 Business Central 2020 Release Wave 2 - Update 17.9; Microsoft Dynamics Nav 2017
Vendor: CVE Published:; 12 August 2021

What is CVE-2021-36946?

Microsoft Dynamics Business Central Cross-site Scripting Vulnerability

Dynamics 365 Business Central Spring 2019 Update 14.0.0 < 14.0.47540

Microsoft Dynamics 365 Business Central 2020 Release Wave 1 - Update 16.15 16.0 < 16.0.28457

Microsoft Dynamics 365 Business Central 2020 Release Wave 2 - Update 17.9 17.0 < 17.0.28458

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

CVE-2021-36946 Data